CVE-2023-43519

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size...

CVE-2023-43519

CVE-2023-43519 describes a memory corruption in video parsing of Videoinfo when the atom size exceeds the Videoinfo size. Connected documents identify this as affecting Qualcomm chipsets and Qualcomm closed‑source components, with CVSS v3.1 base scores indicating high/critical impact (NVD: CRITIC...

CVE-2023-43519: Buffer Copy without Checking Size of Input

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size...

PT-2024-13092 · Qualcomm · Snapdragon +117

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in video while parsing the Videoinfo, which occurs when the size of an atom is greater than the videoinfo size. The...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from memory corruption in video when parsing video information when the atom size is larger than the video information...

atom.com.gt Improper Access Control vulnerability OBB-3832106

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Improper Authorization

Gitlab is vulnerable to Improper Authorization. It is possible for unauthorized users to view public project release descriptions via atom endpoint...

PT-2023-26976 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 11.3 through 16.4.2 GitLab versions 16.5 through 16.5.2 GitLab versions 16.6 through 16.6.0 Description: An issue has been discovered in GitLab where unauthorized users could view public projects' release descriptions via an...

CVE-2023-3949: Insertion of Sensitive Information Into Sent Data

An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint...

CVE-2023-48706

Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a :s command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive :s call causes free-ing of memory which may later...

kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors

A flaw was found in the Linux kernel. A potential security vulnerability in some IntelR AtomR and IntelR XeonR Scalable Processors may allow privilege escalation. This flaw may allow a privileged user to enable privilege escalation via adjacent network access...

kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors

A flaw was found in the Linux kernel. A potential security vulnerability in some IntelR AtomR and IntelR XeonR Scalable Processors may allow privilege escalation. This flaw may allow a privileged user to enable privilege escalation via adjacent network access...

kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors

A flaw was found in the Linux kernel. A potential security vulnerability in some IntelR AtomR and IntelR XeonR Scalable Processors may allow privilege escalation. This flaw may allow a privileged user to enable privilege escalation via adjacent network access...

kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors

A flaw was found in the Linux kernel. A potential security vulnerability in some IntelR AtomR and IntelR XeonR Scalable Processors may allow privilege escalation. This flaw may allow a privileged user to enable privilege escalation via adjacent network access...

2023.3 IPU - BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-37343...

The vulnerability of the MP4SdpAtom::Read() function in the atom_sdp.cpp component of the library for creating, modifying, and reading MP4 files, mp4v2, allows a malicious actor to cause a service failure.

The vulnerability of the MP4SdpAtom::Read function in the atomsdp.cpp component of the library for creating, modifying, and reading MP4 files in mp4v2 is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2022-44451

A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-44451

CVE-2022-44451 affects Open Babel 3.1.1 and the master branch (commit 530dbfa3). The issue is a use of an uninitialized pointer in the MSI format atom functionality, which an attacker can trigger by supplying a specially crafted malformed file to achieve arbitrary code execution. Public reference...

PT-2023-4404

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and prior Description The issue is related to the use of an uninitialized pointer in the MSI format atom functionality of Open Babel. This can be exploited by providing a specially crafted malformed file, potentially...

CVE-2022-44451: Access of Uninitialized Pointer

A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...